NEAS[.]2264b89d64f1ef77d1e01a123cd82010[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2264b89d64f1ef77d1e01a123cd82010.exe
Size

119KB
MD5

2264b89d64f1ef77d1e01a123cd82010
SHA1

92b299c551728fa7fdfd9a14a25466c038975044
SHA256

21b4f7d70db9364ab9e789e8010ca21f4cb64193cacef002361a20f3d08b3956
SHA512

9d58a2792c6569d3f48236bf93d4ac92ff5429e693a74089a373acdc9f4e38d44b86a0f9325753529ccc033b6968cc2bd882e8c01e2a99b6ec1fb7d15de35ef9
SSDEEP

3072:6BNduu0L7Ua/XVP274uMpA4N9WlmwEppsIDH0uoPYqx1eGzk:6BNYNLYGP279M6u9WlVODUHPYqrtk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2264b89d64f1ef77d1e01a123cd82010.exe

Files

NEAS.2264b89d64f1ef77d1e01a123cd82010.exe
.exe windows:4 windows x86

11cf3d283ad4cef8c96798699e60e3de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsA
GetConsoleCP
HeapAlloc
TrimVirtualBuffer
SetTimerQueueTimer
FillConsoleOutputCharacterW
InterlockedExchange
GetDiskFreeSpaceW
WriteConsoleInputA
GetConsoleSelectionInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE